Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
File:                     152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json)
Hash identifier:          eMnv2ARrpyR6H5dxcFhr6UkzLc7UcFB2lEAW1pD8UKM=
Subject key identifier:   3C:FF:89:8D:52:79:C2:AE:4A:E2:44:C7:42:C8:EB:E1:D9:C9:95:75
Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B
Certificate issuer:       /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
Certificate serial:       368E6363D3B784119619B768BFE1BB888CD19102
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
Manifest number:          F2
Signing time:             Fri 30 Oct 2026 01:22:03 +0000
Manifest this update:     Fri 30 Oct 2026 01:17:03 +0000
Manifest next update:     Sat 31 Oct 2026 05:02:03 +0000
Files and hashes:         1: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: wAGohQP7j5WQhhxpI1vUCrz3ymCh3+mVMf6DHclUgTg=)
                          2: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=)
                          3: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=)
                          4: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=)
                          5: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=)
                          6: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=)
                          7: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=)
                          8: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=)
                          9: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=)
                          10: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=)
                          11: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=)
                          12: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=)
                          13: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=)
                          14: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=)
                          15: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=)
                          16: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=)
                          17: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl
                          rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 03:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8e:63:63:d3:b7:84:11:96:19:b7:68:bf:e1:bb:88:8c:d1:91:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B
        Validity
            Not Before: Oct 30 01:17:03 2026 GMT
            Not After : Oct 31 05:02:03 2026 GMT
        Subject: CN=3CFF898D5279C2AE4AE244C742C8EBE1D9C99575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:a8:3e:3a:9f:0a:1a:1d:54:67:68:2f:14:
                    16:79:19:80:fe:da:c0:a2:c1:f8:98:92:ac:62:1c:
                    ee:40:89:85:5a:88:a2:2e:b0:b3:1d:b1:4f:4b:49:
                    7e:29:43:dc:71:60:9f:9d:8c:c5:c1:bb:9f:06:be:
                    c1:e0:eb:fc:d5:52:1c:5a:32:a9:2e:72:fc:29:5a:
                    d8:77:6e:7c:65:16:49:ef:dc:1e:88:0a:49:3b:cb:
                    ac:df:ba:7d:05:1d:71:0a:4d:45:7d:ed:05:03:be:
                    ae:d0:e5:8a:f9:33:c3:73:6a:bb:f3:df:4e:cb:68:
                    b2:1e:7a:e7:8a:86:5e:66:be:5d:52:ff:dc:b7:7b:
                    f5:52:f0:b2:19:41:86:96:a8:39:24:59:08:85:4e:
                    1c:98:2f:15:dd:80:06:a7:64:4e:7c:ca:35:e5:16:
                    1a:da:e4:bc:72:d6:7d:ce:a1:75:1b:2b:c8:6f:84:
                    d8:bc:a0:46:59:f4:4e:42:5b:eb:92:32:67:b1:d1:
                    03:74:86:c0:9c:aa:b8:79:ff:a4:a9:12:af:f7:48:
                    bc:4e:55:33:d5:e5:30:fa:c2:40:87:f0:46:cb:d9:
                    b1:68:f3:da:2d:a6:7b:37:5c:12:9f:66:07:50:b0:
                    40:29:11:a7:8d:6f:76:a6:bc:f8:72:8a:80:f6:60:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:89:8D:52:79:C2:AE:4A:E2:44:C7:42:C8:EB:E1:D9:C9:95:75
            X509v3 Authority Key Identifier:
                keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:d2:46:0b:02:9e:a5:41:6b:56:ab:32:55:9b:8f:61:0f:
         eb:03:d8:61:31:75:49:78:eb:ff:d7:b4:26:29:af:ef:3a:73:
         99:4e:50:37:5b:23:01:6a:63:01:8d:d5:a2:31:f8:c3:7b:0b:
         23:52:1f:f3:c1:90:b6:0f:51:8a:3b:92:0b:df:e0:c0:06:3d:
         3a:eb:58:30:fe:08:eb:9d:00:7e:5e:ab:4f:3a:fc:5a:7c:69:
         81:c0:2c:d5:cc:da:14:7b:f4:40:4b:e6:04:81:f1:c6:9f:ba:
         4b:2a:e8:bb:06:76:70:f7:e8:77:9a:89:1c:57:a0:fa:c9:e5:
         57:0f:bc:44:38:14:59:90:37:1f:b4:6d:9f:2e:d1:cb:3f:7f:
         74:46:de:d0:e7:8d:c6:fc:0f:db:ca:fc:ab:1b:06:9d:ff:eb:
         ae:c6:a7:2c:09:a5:f9:6a:a9:8f:40:a3:7e:03:5b:96:53:c3:
         e0:00:33:b9:e2:2f:46:ad:80:24:7d:db:87:90:7a:98:9c:ee:
         31:47:4c:64:25:46:58:f4:72:27:46:d3:f1:24:97:4e:70:09:
         a4:81:b4:40:66:82:49:45:9b:f2:fe:2c:b0:64:f0:04:57:40:
         28:46:49:ec:27:f2:df:59:de:0b:5f:75:65:1f:a6:bc:77:7e:
         59:2b:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:28 2026 by rpki-client